diff --git a/public/profman.te b/public/profman.te index 3f0348658f525b2a52ae880691ba1931b82ea393..364e9f73f9474ec1ee146980ef59013fb902eb71 100644 --- a/public/profman.te +++ b/public/profman.te @@ -2,24 +2,24 @@ type profman, domain; type profman_exec, exec_type, file_type; -allow profman user_profile_data_file:file { getattr read write lock }; +allow profman user_profile_data_file:file { getattr read write lock map }; # Dumping profile info opens the application APK file for pretty printing. -allow profman asec_apk_file:file { read }; -allow profman apk_data_file:file { getattr read }; +allow profman asec_apk_file:file { read map }; +allow profman apk_data_file:file { getattr read map }; allow profman apk_data_file:dir { getattr read search }; -allow profman oemfs:file { read }; +allow profman oemfs:file { read map }; # Reading an APK opens a ZipArchive, which unpack to tmpfs. -allow profman tmpfs:file { read }; -allow profman profman_dump_data_file:file { write }; +allow profman tmpfs:file { read map }; +allow profman profman_dump_data_file:file { write map }; allow profman installd:fd use; # Allow profman to analyze profiles for the secondary dex files. These # are application dex files reported back to the framework when using # BaseDexClassLoader. -allow profman { privapp_data_file app_data_file }:file { getattr read write lock }; +allow profman { privapp_data_file app_data_file }:file { getattr read write lock map }; allow profman { privapp_data_file app_data_file }:dir { getattr read search }; ###